CVE-2021-3462 MEDIUM

CVE-2021-3462

Vendor Lenovo
Product Power Management Driver for Windows 10
Weakness CWE-276
Published April 13, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.

Key dates

02Disclosure timeline

April 13, 2021 CVE published
August 3, 2024 Record updated